Privacy Policy — English Summary
Engineer Story LC. · Effective October 20, 2026 (announced October 13, 2026)
This is a summary for convenience. Only the Korean Privacy Policy is legally binding. If this summary and the Korean version differ, the Korean version prevails. → Read the full Korean policy
Engineer Story LC. ("we") processes personal information in accordance with Korea's Personal Information Protection Act (PIPA) and related laws.
1. Why we process personal information (Art. 1)
We use personal information only for the purposes below. If a purpose changes, we take the steps required by PIPA, such as obtaining separate consent.
- Newsletter — sending the newsletter and handling unsubscribe requests
- Talent sourcing and hiring — reviewing candidates' backgrounds and fit for projects
- Contracts — signing and performing employment and service contracts, payments, certificates
- Inquiries — answering inquiries received through the website or by email
- Service operation — running internal systems, access logs, preventing misuse
- Sales management — managing client contacts, opportunities and visit schedules
- Internal knowledge management — searching internal business documents
- ES-KMS knowledge search — answering website visitors' questions based on our public materials, and limiting usage to prevent misuse
- Product trials — accepting and approving trial requests for our products (such as the content authoring tool), issuing and managing trial accounts, trial support and follow-up consultation, preventing misuse
2. What we collect (Art. 2)
| Category | Items |
|---|---|
| Newsletter | Email, name, company, job title (also collected when you opt in on a product trial request) |
| Talent sourcing | Name, contact details, education, career history, skills, certifications, résumé and portfolio files, reference checks, evaluations |
| Contracts | Name, date of birth, address, contact details, bank account details, payment records, supporting documents where required by law |
| Inquiries | Name, company, contact number, email, inquiry content |
| Collected automatically | IP address, access time, usage records, browser information, cookies, internal system account, access logs |
| Newsletter link clicks | Issue, article clicked, time, a hashed recipient token |
| Sales management | Client contact's name, company, title, contact details, meeting schedule |
| Internal documents | Names and contact details that appear in internal business documents |
| ES-KMS knowledge search | Your question; your IP address is not stored — it is converted to a random value used only that day to count usage |
| Product trial request | Name, company, phone, email, area of interest, request details, approval status |
| Product trial use | Trial account (ID; password stored with one-way encryption), name and organization (optional), content you create and files you upload, access records (IP address, time) |
| Trial content viewing | For people who view content shared by a trial user: a viewer key derived from IP address and browser information (the originals are not stored), device type, playback progress and viewing time, quiz and survey answers, access records |
- Please do not enter names, phone numbers, email addresses or other personal information into the knowledge search. If a question appears to contain personal information, we do not process it (it is not sent outside the company) and show a notice instead. Automatic detection cannot catch everything.
- We do not collect resident registration numbers except where the law requires it (for example, tax withholding on payments). We do not collect sensitive information such as beliefs, union membership, political views, health or sex life.
- Opting in to the newsletter on a trial request is optional; you can request and use a trial without it, and you can unsubscribe at any time.
- Please do not put other people's personal information (faces, voices, names) in the files or content you upload during a trial, and do not ask viewers for names or contact details in quizzes or surveys.
3. How long we keep it (Art. 3)
| Information | Retention |
|---|---|
| Newsletter subscription | Until you unsubscribe (a minimal unsubscribe record is kept to prevent re-sending) |
| Candidates (incl. references and evaluations) | 3 years from collection, or until you ask us to delete it |
| Contracts | 5 years after the contract ends (as required by law) |
| Project assignment history (name, period) | 10 years after the contract ends (proof of performance) |
| Payment records | 5 years (as required by law) |
| Inquiries | 3 years after the inquiry is closed |
| Website access logs | 3 months |
| Newsletter link clicks | 3 years, or until you unsubscribe |
| Sales management | 3 years after the business relationship ends, or until you ask us to delete it |
| Internal business documents | Documents excluded from search stop appearing immediately; deletion deadlines for index data and backups will be published in the policy once confirmed |
| HR and payroll records | 5 years after leaving; personal fields are then erased, leaving only the record and employee number |
| ES-KMS knowledge search | Questions are not stored (discarded after the answer is generated). Shortened answers and usage counters are kept until the end of the day. Anonymous usage statistics are kept |
| Trial requests | 3 years after the request is closed |
| Trial accounts, content and viewing records | Kept until 30 days after the 7-day trial ends, then deleted together (earlier on request); server backup copies are deleted automatically within 120 days |
4. Sharing with third parties (Art. 4)
We do not routinely share personal information with third parties. When we propose a candidate to a client, we first obtain that person's individual consent and share only what is necessary.
5. Processors and international transfers (Art. 5)
| Processor | What they do | Location |
|---|---|---|
| Google LLC | Cloud storage and data management, email, forms, calendar, AI document recognition and talent search (Gemini API) | USA and other countries where Google operates data centers |
| Anthropic, PBC | Generating answers for the ES-KMS knowledge search (AI) | USA |
| Cafe24 Corp. | Server hosting | Republic of Korea |
| Google LLC | Server backup storage (Google Cloud Storage), deleted automatically within 120 days | Republic of Korea (Seoul) |
- Google LLC (googlekrsupport@google.com) — data is transferred over encrypted connections (TLS) whenever our business systems store or send it or use AI features. Retention follows Art. 3. Data sent to the AI features is not used to train Google's models and is logged only for a limited period for abuse monitoring.
- Anthropic, PBC (privacy@anthropic.com) — each knowledge-search question is sent over an encrypted connection (TLS) to generate the answer. It is kept for 30 days and then deleted, and is not used for model training.
- You may refuse the international transfer. If you do not want your question sent to Anthropic, please contact us by email or phone instead of using the search. For other transfers, contact us (Art. 9); refusing may limit the related service.
6. Google API user data (Art. 6)
Our internal systems use Google Workspace APIs. We comply with the Google API Services User Data Policy, including the Limited Use requirements: we use Google user data only for the stated business purposes, never for advertising or sale, never to train AI models, and people do not view it except for security, legal compliance or with explicit consent.
7. Deletion (Art. 7)
When personal information is no longer needed, we delete it without delay (in principle within 5 days) — electronic files are permanently deleted so they cannot be recovered, and paper documents are shredded or incinerated. Information we must keep by law is stored separately.
8. Your rights (Art. 8)
You may ask us at any time to access, correct, delete or stop processing your personal information, in writing, by phone or by email (Art. 9). You may also act through a representative with a power of attorney. To stop receiving the newsletter, use the unsubscribe link in any issue or email us.
9. Privacy Officer (Art. 9)
| Privacy Officer | Byoungjo Min (Sales lead) |
| engineerstory2018@gmail.com | |
| Phone | +82-10-7229-5786 |
| Address | 612, 59-9 Magokjungang-ro, Gangseo-gu, Seoul (Megatower), Republic of Korea |
10. Security measures (Art. 10)
Limited staff access and training, role-based access with regular review, access logs, encryption in transit (TLS), account authentication, masking of personal information, automatic detection and blocking of personal information in knowledge-search questions before they are sent to an external AI, lockable storage for documents, and no plain-text storage of API keys or tokens.
11. Cookies and newsletter click tracking (Art. 11 · 11-2)
- We may use cookies. You can block them in your browser settings; some features may not work.
- The product trial service uses a login cookie only on the trial service address; if you block it, you cannot sign in to the trial. The public playback page uses no cookies.
- Newsletter links pass through our redirect system, which records the issue, the article clicked, the time and a hashed recipient token (your email address is not exposed in the link). This helps us improve content and understand readers' interests. It is kept for 3 years or until you unsubscribe and is not shared with third parties. If you do not click, nothing is recorded; you can ask us to delete past records.
12. Remedies (Art. 12)
You may seek help from: Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr) · Personal Information Infringement Report Center (118, privacy.kisa.or.kr) · Supreme Prosecutors' Office cybercrime unit (1301, www.spo.go.kr) · Korean National Police Agency Cyber Bureau (182, ecrm.police.go.kr).
13. Changes (Art. 13)
We announce changes on this website at least 7 days before they take effect. This summary is updated on the same day as the Korean policy.
Effective October 20, 2026 · → Full Korean policy